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Abstract 

. We present QBAL, an extension of Girard, Scedrov and Scott's bounded linear logic. The 

' main novelty of the system is the possibility of quantifying over resource variables. This gen- 

eralization makes bounded linear logic considerably more flexible, while preserving soundness 
and completeness for polynomial time. In particular, we provide compositional embeddings 
of Leivant's RRW and Hofmann's LFPL into QBAL. 
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1 Introduction 



After two decades from the pioneering works that started it [3l |T2l [13] , implicit computational 
complexity is now an active research area at the intersection of mathematical logic and computer 
^ ■ science. Its aim is the study of machine-free characterizations of complexity classes. The corre- 

•/^ i spondence between an ICC system and a complexity class holds extensionally, i.e., the class of 

' functions (or problems) which are representable in the system equals the complexity class. Usually, 

the system is a fragment or subsystem of a larger programming language or logical system, the 
base system, in which other functions besides the ones in the complexity class can be represented. 
Sometimes, one of the two inclusions is shown by proving that any program (or proof) can be 
reduced in bounded time; in this case, we say that the system is intensionally sound. On the other 
, hand, ICC systems are very far from being intensionally complete: there are many programs (or 

proofs) in the base system which are not in the ICC system, even if they can be evaluated with the 
prescribed complexity bounds. Observe that this does not contradict extensional completeness, 
since many different programs or proofs compute the same function. 



^ , Of course, a system that captures all and only the programs of the base system running 

within a prescribed complexity bound will in all but trivial cases (e.g., empty base system) fail to 
be recursively enumerable. Thus, in practice, one strives to improve intensional expressivity by 
capturing important classes of examples and patterns. 

An obstacle towards applying ICC characterizations of complexity classes to programming lan- 
guage theory is their poor intensional expressive power: most ICC systems do not capture natural 
programs and therefore are not useful in practice. This problem has been already considered in the 
literature. Some papers try to address the poor intensional expressive power of ICC systems by 
defining new programming languages allowing to program in ways which are not allowed in existing 
ICC systems. This includes quasi-interpretations T4] and LFPL by the second author p]. Other 
papers analyze the intensional expressive power of existing systems either by studying necessary 
conditions on captured programs or, more frequently, by studying relations between existing ICC 
systems. One nice example is Murawski and Ong's paper [15] . in which the authors prove that 
there cannot be any embedding (satisfying certain properties) of Bellantoni and Cook function 
algebra BC [3] into light affine logic [1]. In this work, we somehow combine the two approaches, 
by showing that a new logical system, called QBAL is intensionally at least as expressive as two 
heterogeneous, existing systems, namely Leivant's RRW and LFPL. 
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QBAL is a generalization of Girard, Scedrov and Scott's bounded linear logic (BLL, T), itself 
the first characterization of polynomial time computable functions as a fragment of Girard's linear 
logic 5 . Bounded linear logic has received relatively little attention in the past [TUIII^. This 
is mainly due to its syntax, which is more involved than the one of other complexity-related 
fragments of linear logic appeared more recently [6l |4] . 

In bounded linear logic, polynomials are part of the syntax and, as a consequence, computation 
time is controlled explicitly. However, it seems that BLL is not as intensionally expressive as to 
be able to embed any existing ICC system corresponding to polynomial time (except Lafont's 
SLL [TT], which anyway was conceived as a very small fragment of BLL). QBAL is obtained by 
endowing BLL with bounded quantification on resource variables. In other words, formulas of 
QBAL includes the ones of BLL, plus formulas like 3x : {x < y'^}-A or Vx,y ■ {x < z,y < z^}.B. 
This new feature by itself increases the intensional expressive power: both RRW and LFPL can be 
compositionally embedded into QBAL. Moreover, QBAL remains sound with respect to polynomial 
time. For these reasons, QBAL is not just another system capturing polynomial time computable 
functions. 



In this Section, we present the syntax of QBAL, together with some of its main properties. In 
the following, we adhere to the notation adopted in the relevant literature on BLL [71 IIP). 

2.1 Resource Polynomials and Constraints 

We will work with the set N of natural numbers. 

Definition 2.1 •A resource monomial is any finite product of binomial coefficients 



where the variables distinct and rii, . . . , are integer constants. 

• A resource polynomial is any finite sum of monomials. FV{p) denotes the set of variables in 
a resource polynomial p. 

Lemma 2.1 Resource polynomials are closed under sum, product and composition. 

Order relations between resource polynomials are captured by constraints and constraint sets: 

Definition 2.2 (Constraints) • A constraint is an inequality in the form p < q, where p and 
q are resource polynomials. A constraint set is a finite set of constraints. Constraint sets are 
denoted with letters like "rf or 'Si . p < q stands for p < q -\- I. 

• For each constraint set 'rf, we define an order on resource polynomials by imposing p □<g' q 
iff H P 9; i-e., the (pointwise) inequality p < q is a logical consequence of^. 

• '^\^Siff'S'[^p<q for every constraint p < q in S . 

2.2 Formulas 

Resource polynomials, constraints and constraint sets becomes, in turn, the essential ingredients 
in the definition of QBAL formulas: 

Definition 2.3 Formulas of QBAL are defined as follows: 



2 Syntax 




A ::=a(pi, . . . ,p„) \ A(S) A \ A^ A \ \/a.A \ \^<pA \ 
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where x ^ FV{p), a ranges over a countable class of atoms (each with an arityn). We will restrict 
ourselves to bounded first order quantification. In other words, whenever we write V(xi, . . . ,a;„) : 
'iif.A or 3{xi, . . . , Xn) ■ "^.A we implicitly assume that for every i there is a resource polynomial pi 
not containing the variables Xi, . . . ,Xn such that \^ {x\ < pi, . . . ,Xn < Pn}- ot is bound in \fa.A, 
X is bound in l^^pA and bound in V(xi , . . . , a;„) : ^.A and 3{xi , . . . ,Xn) : "^.A 

Checking the boundedness condition on formulas is undecidable in general (but here, we are 
not concerned about the complexity of QBAL as a verification technique). Notice that resource 
polynomials and the variables in them can occur inside constraints, constraint sets and formulas. 
The following definition becomes natural: 

Definition 2.4 (Positive and Negative Occurrences) • Any variable in p (respectively, in 
q) occurs negatively (respectively, positively) in the constraint p < q. Analogously for constraint 
sets. 

• The definition of a positive ( or negative ) occurrence of a variable in a formula A is defined by 
induction on A: 

• All the variables in FV{pi) U . . . U FV{p„) occur positively in a{pi, . . . ,Pn)- 

• Polarities are propagated through compound formulas by noting that —o is negative in the 
first slot, \x<p is negative in p and Vx:^ is negative in All other slots are positive. For 
example, the first occurrence of x in yy:{y<x}.a(x,y) is negative while the second one is 
positive. We omit the detailed definition. 

• Let B be a formula where the free variables xi, ... ,Xn occur only positively. Then A{B / a{xi, . . . ,Xn)} 
denotes the formula obtained by replacing every free occurrence ofa{pi, . . . ,p„) with B{pi/xi, . . . ,Pn/xn} 
inside A. 

• The order can be extended to an order on formulae as follows: 

a{pi,...,pn) a{qi,...qn) iff^i-Pi^vqi 

A(E)B C.^ C(»D iff A^-ffC /\B^<^ D 

A^ B C ^ D iff C AaB Hr^' D 

Va.A \/a.B iff A B 

h<pA ^-xKqB iff q^'^ pAx ^ FVC^) AA\Z<^u{x<p} B 

\fx : 9. A \lx:S.Bif^'£\jS^9Ax(l^ FV{'^) A A r<^u& B 

3x : 9. A 3x : S .B if^ \J 9 ^ S Ax (j^ FV{'^) A A \Z<^us B 

A QBAL judgement is an expression in the form F A, where is a constraint set, F is a 
multiset of formulas and ^ is a formula. Rules of inference for QBAL are in Figure [T] All rules 
except first order ones are the natural generalizations of BLL rules. First order rules are similar 
to the standard ones from predicate logic as a sequent calculus, with the additional complexity 
brought on by constraints. If tt is a proof of QBAL, then \tt\ is the number of rule instances in tt. 



2.3 QBAL and Second Order Logic 

Second order intuitionistic logic can be presented as a context-independent sequence calculus with 
explicit structural rules [17], G2i. Rules of G2i are in Figure [2l There is a forgetful map [■] from 
the space of QBAL proofs to the space of G2i proofs. In particular -o corresponds to and (8) 
corresponds to A. Essentially, [tt] have the same structure of tt, except for exponential and first 
order rules, which have no formal correspondence in G2i. From our point of view, if [tt] = [p], then 
TT and p correspond to the same program, i.e. QBAL can be seen as a proper decoration of second 
order logic proofs with additional information which are not necessary to perform the underlying 
computation. 



2.4 Properties 

QBAL inherits some nice properties from BLL. In particular, proofs can be manipulated in a 
uniform way by altering their conclusion without altering their structure, i.e., without changing 
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Axiom and Cut 

Structural Rules 

r B r, \x<pA, !y< qA{p + y/x} \-'^ B p + q^'^r 

W ri 7^ X 



T,Ah^B T,\x<rAh^B 
Multiplicative Logical Rules 

T,A\-<^B rh^A A,Bh^C 

-fi_ 



T\-.^ A^B ^ r, A, A ^ S h<^ C 

T\-<^A Ah^B r,A,B\-^C 



Exponential Rules 

'x<gi^l) ■ • • ) !x<g„^n ^Si^-x<pB 

A{l/x},V^.gB IQ^p 
^■x<pU<qA{z + X:^,<^ g{w/a:}/y}, F B r C-^ Xix<p g 

!y<rA, r B 

Second Order Rules 



N, 



Th^A a^FV{T) T, A{B/a{xi, . . . ,Xn)} C 

T\-^ya.A -"^^ T,ya.Ah<^C ^« 

First Order Rules 

T\-<ffu@A X^FV{T)UFV{'^) T,A{p/x}h^C ^ \= 9{p/x} 

V^^\tx:S).A ^"^^ T,\tx:2i.A^^C 

rh^A{p/x} ^h^{pM „ r,^h^ug>g ^ ^ FK(r) u FK((7) u FFCT) 

Figure 1: A sequent calculus for QBAL 
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Axiom, Cut and Structural Rules 

TTa^ r,A h b ^ r\Th~B ^ v.avb ^ 

Logical Rules 

T,A^B ThA A,B^C rhA Ah B T,A,BhC 

ThA^B^^ T,A,A^B\-C T^AhAxB T,AxBhC 

Second Order Rules 

Th A FV{T) T, A{B/a} h C 

r h Va.A T,ya.AhC 

Figure 2: A sequent calculus for G2i 



the underlying second order logic proof. First of all, a useful transformation is the strengthening 
of the underlying constraint set 

Proposition 2.1 If tt : Ai,...,An h^ B is a proof and ^ \^ ^ , then there is a proof p : 
Ai, . . . , An h^ B such [p] ~ [tt] and \p\ < \tt\ . 

Proof. An easy induction on tt. □ 

Lemma 2.2 If Xi, . . . ,a;„ occur positively (negatively, respectively) in , pi Cg) for every i and 
X ^ FV{&), then '^{p/x} U ^ h '^{q/x} (V{q/x} U ^ h "^{p/^}, respectively). 

Proof. Take any constraint r < i in and suppose xi, . . . , a;„ occur positively in Then they 
occur positively in r <t and they cannot occur in r. So: 

{r<t){p/x} = r<{t{p/x}) 
{r<t){q/x} = r<{t{q/x}) 

Now, since pi qi for every i, t{p/x} C@ t{q/x}. As a consequence, ^{p/x} \J '3) \= '£{qlx\. 
Analogously if xi, . . . , x„ occur only negatively in . □ 

Lemma 2.3 If A is a formula where the variables Xi,...,Xn occur only positively (negatively, 
respectively) Pi C.^ q^ for every i andx ^ FV{'^^), then A{p/x} A{q/x} (A{q/x} C-^g A{p/x}, 
respectively). 

Proof. By induction on A. Let's just check the most interesting cases: 

• U A = 3y : S>.B, then the variables in y can be assumed to be distinct from xi . . . ,a;„. 
Moreover: 

A{p/x} = 3y : 3{p/x}.B{p/x} 
A{q/x} = 3y : 3{q/x}.B{q/x} 

Now, suppose that xi,...,a;„ occur only positively in A. Then, by induction hypothesis, 
B{p/x} E"^ B{q/x} Moreover, by Lemma \T2l 9{p/x} U ^ ^ ^{q/x}. By definition, this 
implies A{p/x} A{q/x}. Similarly if xi, . . . , a;„ occur only negatively in A. 

• If A — 3y : S>.B, then we can proceed exactly in the same way. 

This concludes the proof. □ 

QBAL is monotone with respect to the relation C ^ on formulas: 
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Proposition 2.2 If tt : Ai, . . . , An B, B D and Ci Ai for every 1 < i < n, then there 
is p : Ci, . . . , Cn D such that [p] ~ [tt] . 

Proof. By induction on \tt\ Some interesting cases are ttie following ones: 

• Suppose that tt is simply 

AQ-^ B 
Ah<^B . 

and that C A and B D. Then, by transitivity of CI<^, C D and p is 

• Suppose that tt is 

Ai,...,Anh<^ B ^,x<p^'^ xiFV{&) pQojq^ 

^■x<qiAi, . . . , lx<q„An ^^^-xKpB 

and that \x<riCi Qsi\x<qiAi (for every i) and lx<pB Q@lx<sD. By definition, qi C@ for 
every i and s ^gi p. By the side condition to the premise of tt (and by transitivity of C®), we 
obtain s for every i. Moreover, we have Ci Q^u{x<qi} for every i and B Q^u{x<s} D. 

This implies Ci !^®u{2;<s} for every i. Now, since ^ U {a; < s} |= ^ U {a; < p} ^ we can 
obtain, by Proposition [^Hl a proof cr of Ai, . . . ,An l~g)u{x<5} B such that \a\ < |7r|. Then, we 
can easily apply the induction hypothesis on a and conclude. 
This concludes the proof. □ 

Another useful transformation on proofs is the substitution of resource polynomials for free vari- 
ables: 

Proposition 2.3 If tt : Ai, . . . , An h<g' B is a proof and pi, . . . ,p„ are resource polynomials free 
for substitution for the free resource variables Xi,...,Xn in tt, then there is a proof tt{p/x} : 
Ai{p/x}, . . . ,An{p/x} \-'^{p/x} B{p/x} such that [tt{p/x}] = [tt]. 

Proof. By induction on tt. Some interesting cases are the following ones: 

• Suppose that tt is simply 

Ar^B 
A\-^B . 

Now, if A B then A{p/x} IZ<g=jp^^j B{p/x}, as can be easily proved by induction on A. As 
a consequence, 

A{p/x} ^'^{p/x} B{p/x] 

A{p/x} \''€{plx-] B{plx} . 
This concludes the proof. □ 
But formulas themselves can be substituted (for atoms) into a proof: 

Proposition 2.4 If tt : Ai,...,An ^~<g■ B is a proof C is a formula where the free variables 
xi, . . . , Xm occur only positively and a is an atom with ariety m, then there is a proof tt{C /a\ : 
Ai{C/a},...,An{C/a} B{C/a} such that [7r{C/a}] = [tt]. 

Proof. By induction on tt. Some interesting cases are the following ones: 

• Again, one interesting case is when tt is simply 

A^^ B . 

Now, if A B then A{C/a} B{C/a}, as can be easily proved by induction on A. As a 
consequence: 

A{p/x} 

— consetone{p/ x} 

B{p/x] 
A{p/x} ^^{pjx-} B{p/x} 

□ 
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2.5 Cut-Elimination 



A nice application of the propositions we have just given is cut-ehmination. Indeed, the new rules 
Rixi L\/x^ R^x and L^x do not cause any problem in the cut-elimination process. For example, 
the cut 

TT : r K^u@ A xj FV{T) U Fyj"^) A, A{p/x] h-j^ C h ^{p/x] 

r h-i^ : A, VaJ : 

r,Ah^c ^ 

can be eliminated as follows: 

g : r p : A, ^{p/x} C 

r,Ah^c 

where u is obtained by applying Proposition 12. II to 

■n{p/x} : V ^^us>{p/x} A{p/x}, 

itself obtained from tt applying Proposition [231 In this paper, we will not study cut-elimination. 
And polynomial time soundness will be itself proved semantically. 



2.6 Programming in QBAL 

The Curry-Howard correspondence allows to use BLL and QBAL as programming languages. In 
particular, following the usual impredicative encoding of data into second order intuitionistic logic, 
natural numbers can be represented as cut-free proofs of the formula 

Np = \ia.\y^p{a{y) -o a{y + 1)) -<> a{Q) -o a{p). 

However, only natural numbers less or equal to p can be represented. 

This can be generalized to any word algebra. Given a word algebra W, we will denote by ew 
the only 0-ary constructor of W and by c^, . . . , the 1-ary constructors of the same algebra. 
Notice that these objects can be thought of both as term formers and as (0-ary or unary) functions 
on terms. Terms of a free algebra W of length at most p can be represented as cut-free proofs of 
the formula 

Wp = \/a.ly<p{a{y) a{y + 1)) ^ . . . -^ly<p{a{y) -<> a{y + 1)) ^ a(0) a{p). 

w times 

Functions on natural numbers can be represented by proofs with conclusion h Np, where p 
is a resource polynomial depending on x, only. More generally, functions on the word algebra W 
can be represented by proofs with conclusion h Wp. For example, all constructors c^, . . . , 
corresponds to proofs with conclusion W^; h Wx+i- More generally, the polynomial p gives a 
bound on the size of the result, as a function of the size of the input. QBAL supports iteration on 
any word algebra (including natural numbers). As an example, for every p and for every A where 
X only appears positively, there is a proof of Np, A{y/x} -<> A{y + 1/x}, A{0/x} h A{p/x}. 

2.7 Unbounded First Order Quantification is Unsound 

One may wonder why quantification on numerical variables is restricted to be bounded (see Def- 
inition [2131) • The reason is very simple: in presence of unbounded quantification, QBAL would 
immediately become unsound. To see that, define Nqo to be the formula 3{x) : $.'Nx- The com- 
position of the successor with itself yields a proof with conclusion N^, h N3;4_2 which, by rules 
Rjx and L^x: becomes a proof with conclusion Nqo h Nqo. Iterating it, we obtain a proof of 
h which computes the function n >—>■ 2n. But by rule L^x, it can be turned into a proof 
of Noo l~ Noo, and iterating it again we obtain a proof computing the exponential function. The 
boundedness assumption will be indeed critical in Section [H where we establish that any functions 
which is representable in QBAL is polynomial time computable. 
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3 Set-Theoretic Semantics 



In this Section, we give a set-thcorctic semantics for QBAL. We assume that our ambient set-theory 
is constructive. This way we have a set of sets U which contains the natural numbers, closed 
under binary products, function spaces and W- indexed products. An alternative to assuming a 
constructive ambient set theory consists of replacing plain sets with PERs (partial equivalence 
relations) or domains or similar structures. See [10] for a more detailed discussion of this issue. 

Formulas of QBAL can be interpreted as sets as follows, where p is an environment mapping 
atoms to sets: 

p{a); 

n Mlp["-ci; 

Please observe that the interpretation of any formula A is completely independent from the re- 
source polynomials appearing in A. 

To any QBAL proof tt of Ai, . . . ,An B we can associate a set-theoretic function |[7r]]p : 
[[Ai (3 . . . (g) Anjp — > I-Slp by induction on tt, in the obvious way. |[7r]p is equal to the set- 
theoretic semantics of [tt] as a proof of second order intuitionistic logic. Set-theoretic semantics of 
proofs is preserved by cut-elimination: if tt reduces to a by cut-elimination, then |[7r]]p = Icrlp- 

Observe that [^Ip only depends on the values of p on atoms appearing free in A. So, in 
particular, 

ceu 

is independent on p and on q, since is a closed formula. Similarly for |Wq Jp. Actually, there 

are functions : N ^ | Np J and V'n : | Np J ^ N such that i/'n ° y^N is the identity on natural 
numbers. They are defined as follows: 

■0N(a;) = a; -f- 1)(0) 

So, given a proof tt : N^^ h Np, the numeric function represented by tt is simply ipf^ o |[7r]] o (pfj. 
Similar arguments hold for functions with conclusion Wj, h Wp. 

4 QBAL and Polynomial Time 

In this Section we show that all functions on natural numbers definable in QBAL are polynomial 
time computable. To this end, we follow the semantic approach in [10] which we now summarise. 

4.1 Realisability Sets 

Let X be a finite set of variables. We write V{X) for — the elements of V{X) are called 
valuations (over X). If r] € V(X) and c e N then r][x 1-^ c] denotes the valuation which maps 
X to c and acts like rj otherwise. We assume some reasonable encoding of valuations as natural 
numbers allowing them to be passed as arguments to algorithms. 

If is a constraint set involving at most the variables in X {over X) then we write 77 ^ to 
mean that the valuation 77 G V{X) satisfies all the constraints in ^. We write V{X) for the set of 
resource polynomials over X . If p G 'PiX) and rj G V{X) we write p{r]) for the number obtained 
by evaluating p with x i-^ ri{x) for each a; G X. 



I^^bIp = 

lA^Bj, = 

IVa.^lp = 

ll^<pAh=lVx:'^.Ajp=l3x:'^.Ajp = 
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We assume known the untyped lambda calculus as defined e.g. in [2]. An untyped lambda term 
is affine linear if each variable (free or bound) appears at most once (up to a-congruence). For 
example, Xx.Xy.yx and Xx.Xy.y and Xx.xy are affine linear while the term Xx.xx is not. Notice 
that every affine linear term t is strongly normalisable in less than \t\ steps where \t\ is the size 
of the term. The runtime of the computation leading to the normal form is therefore 0(|tp). We 
will henceforth use the expression affine lambda term for an untyped affine linear lambda term 
which is in normal form. If s, i are affine lambda terms then their application st is defined as 
the normal form of the lambda term st. Notice that the application st can be computed in time 

om + \t\f). 

If s, t are affine lambda terms we write s®t for the affine lambda term Xf.fst. If t is an affine 
lambda term possibly containing the free variables x,y then we write Xx®y.t for Xu.u{XxXy.t). 
Notice that {Xx®y .t){u®v) = t{u/x,v/y}. 

More generally, if [tfji^n is a family of affine lambda terms, we write (S)i<n f'^'' '^f-ftoti ■ ■ ■ tn-i 
and A{^^^jj Xi.t for Xu.u{XxqXxi . . . Xxn^i-t). Again, 

iX(^Xi.t){^ti) = t{tQ/xQ, . . . ,t„_i/x„_i} 

i<n i<n 

We write Aa for the set of closed affine lambda terms. 

There is a canonical way of representing terms of any word algebra W as affine lambda terms, 
which is attributed to Dana Scott [TB]. For example, the natural number 2 corresponds to the 
term '"2"' — Xx.Xy.x(Xx.Xy.x(Xx.Xy.y)). 

Definition 4.1 Let X be a finite set of resource variables. A realizability set over X is a pair 

A = {\A\, \\-a) where \A\ is a set and IHy^C V{X) x Aq x |^| is a ternary relation between valuations 
over X, affine lambda terms, and the set \A\. We write rj^t \\-a a for {r],t,a) Glh^. 

The intuition behind 77, t I a is that a is an abstract semantic value, 77 measures the abstract 
size of a, and the affine lambda term t encodes the abstract value a. 

Example 4.1 (i) The realizability set ISS^ over {x} 0/ tally natural numbers ("of size at most 
x") is defined by: [N^l = N and 

"n, t IKn^ n if t = ^n~^ and ri{x) > n 

(ii) The realizability set Wj, over {a;} of bee terms of W ("of length at most x") is defined by: 
|W^| = W and 

rj, t Ihw^ w if t — ^w~^ and rj{x) > \w\ 

These realizability sets N^^ and turn out to be retracts of the denotations of the BLL formulas 
from Sectioning 

Definition 4.2 Let A be a realizability set over X. We say that x E X is positive ('negative, 
respectively) in A, if for all rj^fi G V{X),t G Aa,a G \A\ where rj and /i agree on X \ {x} and 
ri{x) < /i(x) (r]{x) > ji{x), respectively), rj,t Ih^ a implies Ihyi a. 

We notice that x is positive in and Wj,. 

Definition 4.3 Let A, B be realizability sets over some set X. A morphism from A to B is a 
function / : |A| — > \B\ satisfying the following condition: there exists a function e : V(A) Aa 
such that e{r/) is computable in time q(r]) for some resource polynomial q and for each rj G V{X), 
t G Aa, a G \A\, we have 

ry,tlhyia implies rj , e{ri)t \\- b f (a) 

In this case we say that e witnesses / and write A — >^ B where in the notation the algorithm e is 
presumed to exist. 

The following definition summarises the interpretation of formulas according to |10j : 
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Definition 4.4 Let A, B be realizability sets over X . Then the following are realizability sets over 
X: 

• A (El B as given by |A ® i?| ~ \ A\ x \B\ and rj, t Ih^i^s (a, b) iff t = u®v, where 7],u\'^a o. and 
■q, V Ihs h. 

• A ^ B is given by \A ^ B\ = \ A\ => \B\ and rj^t \^a^b f iff whenever r],u \\-a a it holds that 
ri,tu \\-B f{a). 

If C is a realizability set over X U {x} and p £ 'P{X) then a realizability set \x<pC over X is 
defined by |!a;<pC| = |C| and ri,t \\-\^^j,c a if 

• * = 0,:<p(,,) *i for some family {ti)i<p{n); 

• ri[x >—>■ i], ti Ihc a for each i < p{ri). 

We refer to [TU] for the in principle straightforward but notationaUy cumbersome account of 
universal quantification over propositions. 

Using these semantic constructions one defines for each formula A with free resource variables 
contained in X and assignment p of realizability sets to atoms, a realizability set |[v4]p over X in 
such a way that | [^Ip | — [^1 |p| (where \p\ is the assignment of sets to atoms obtained form p in 
the obvious way) , that is to say, the underlying set of the realizability set interpreting a formula 
A coincides with the set-theoretic meaning of A. 

The main result of [10] then asserts that if tt is a proof (in BLL) of a sequent F h i? then the 
function Itt]] |p| is a morphism from [fJ^ to |[i?]]p (where we interpret a context F as a ^-product 
over its components as usual). From this, polynomial time soundness is a direct corollary since 
polynomial time computability is built into the notion of a morphism. 

It thus only remains to extend the realizability model to cover the constructs of QBAL which 
we do in the next Section. 

4.2 Extending the Realizability Model to QBAL 

The notion of a realizability set above is adequate to model formulas of QBAL. The notion of a 
morphism, however, should be slightly generalized in order to capture constraints: 

Definition 4.5 Let A, B be realizability sets over some set X and a constraint set over X. A 
function f : \A\ ^ \B\: is a -morphism from A to B iff there exists a function e : V{X) Aa 
such that e{rf) is computable in time q(rf) for some resource polynomial q and for each rj G V{X) 
with r] \= 'to , t G Aa, a G \A\, we have that rj, t Ih^ a implies rj, e(ri)t Ih^ /(a). 

In order to define realizability sets Vyi'^.A and 3y:'^.A, we fix some encoding of environments r] as 
afhne lambda terms using the encoding of natural numbers. We do not notationaUy distinguish 
environments from their encodings. 

Definition 4.6 Let X, Y be disjoint sets of variables. Let A be a realizability set over X (JY and 
^ a constraint set over X UY where we put Y ~ {yi, . . . , y„} and y — (j/i, ...,?/„). Furthermore, 
for each i = 1, . . . ,n let pi £ T^i^) be such that \= {y < p}. 
. |Vy:<^.A| = |3y:^.A| = \A\, 

• ri,t \V\jy-x.A o, <;=^ V/^ e V(F).ryU^ ^ »7U^, t^ \\-a a- 

• r],p®t \\-3y;<g,A a <^=> p e V(y) A rjUp |= ^ A r/Up, t Ih^ a 

Recall that \fy:^.A and 3y:'^.A are well-formed only if for each i there is a resource polynomial 
Pi such that \= yi < Pi- Therefore, the set {p \ rjUp 'if} is finite and in fact computable in 
polynomial time from rj. 

We are now able to prove the main result of this Section: 

Theorem 4.1 Let n be a proof of a sequent F h<^ B and p a mapping of atoms to realizability 
sets. Then |[7r]]|p| is a'to -morphism from [fJ^ to \b\^ . 

Proof. The proof is by induction on derivations. We only show the cases that differ significantly 
from the development in [TU] . 
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Case P\. For simplicity, suppose that n = \, qi = p and Ai ~ A. The induction hypothesis shows 
that [ttJipI is a "^^-morphism from |[j4]^ to |[-B]]p witnessed by e. As in the proof of the main 
result in [TU], we define 

d{vi) = A a;^. e{ri[x ^ i\)xi. 

i<p(v) i<p(v) 

Now, a rj \= then ri[x t-^ i] \= whenever i < p(ri) by the side condition from rule Pi. We 

obtain that [tt]] is a ^-morphism from |!a;<p^]p to |!a;<p-Bjp witnessed by d. 

The remaining cases are the four rules for first order quantifiers. In each case, we assume by the 

induction hypothesis that [ttJ is a morphism realising the premise of the rule and let e be its 

witness. We have to show that [tt]] is a morphism realising the conclusion of the rule. Note that 

the set-theoretic meaning of a proof docs not change upon application of any of the quantifier 

rules. 

Case Rix- Suppose that ry ^ and ri,t^ ""[r]'' ^' suppose U /i |= i^. By the induction 

hypothesis ryU/i, e{ri[Jfj,)tj II"|^]]b I'I'Kt)- We thus define d by d{ri) = u where u £ Aq is such that 
utfi — e{rj U whenever rj[J ^ \= . Recall that for a given 77 there are only 5(77) such /i (for a 
fixed resource polynomial g), so that t can be construed as a big case distinction over all those /i. 
It is then clear that d is polynomial time computable and realises the conclusion of the rule. 
Case Lyx- Assume 77 ^ and 77, "^Ir]" ^"^^ '^^^'^ "^[w® a- Define /i^ G V{X) by 
IJ"q{xi) — Pi{rj) so that 77 U /i^ |= by the side condition to the rule. Now, 77U/Z,,, iaMr; a 
by Definition 14.61 Hence, r],ta^ir] \^A{p/x} o-- By the induction hypothesis, e(r]){tj ® ta^Ji-q) ll"c 
|[7r]](7,a), so d{ini) ~ Xx^ (Si Xa-e{r]){x^ (8) XailJ^n)) ^'^^^ J^^- The remaining two cases are 
essentially dual to the previous two. We merely define the witnesses. 
Case R^x- Define iJi{ri) as in Ly^- We can then put d{ri) = \tj.^{rf) (g) e{r])t~^. 
Case L^x- We define ^(77) to be such that d{T])tj{iJ, (8) t) = 6(77 U fi)tjt. This is possible by 
hard- wiring separate cases for each of the polynomially in 77 many fi like in case i?vx- 1^ 

5 On Compositional Embeddings 

In this Section, we try to justify our emphasis on compositional embeddings. An embedding of a 
logical system or programming language L into QBAL is a function (■) from the space of proofs (or 
programs) of L into the space of proofs for QBAL. Clearly, for an embedding to be relevant from 
a computational point of view, any proof tt of L should be mapped to an equivalent proof (tt), 
e.g., |(7r)| = [tt]]. The existence of an embedding of L into QBAL implicitly proves that QBAL 
is extensionally at least as powerful as L. Such an embedding (•) is not necessarily computable 
nor natural. But whenever L is a sound and complete ICC characterization of polynomial time, 
it must exists, since the classes of definable functions in L and in QBAL are exactly the same. 
Indeed, QBAL is both extensionally sound (see Section 3]) and extensionally complete (since BLL 
can be compositionally embedded into it, see below). 

Typically, one would like to go beyond extensionality and prove that QBAL is intensionally 
as powerful as L. And if this is the goal, (•) should be easily computable. Ideally, we would like 
(•) to act homeomorphically on the space of proofs of L. In other words, whenever a proof tt of 
L is obtained applying a proof- forming rule R to pi, . . . , pn, then (tt) should be obtainable from 
(pi), . . . , (pn) in a uniform way, i.e., dependently on R but independently on {pi), . . . , (pn)- An 
embedding satisfying the above constraint is said to be strongly compositional. The embeddings 
we will present in the following two sections are only weakly compositional: [(tt)] can be uniformly 
built from [{pi)], ■ ■ ■ , [{pn)] whenever TT is obtciined applying R to pi, ... , pn- We believe that the 
existence of a weakly compositional embedding of L into QBAL is sufficient to guarantee that QBAL 
is intensionally as powerful as L because, as we pointed out in Section [2.3[ [tt] can be thought as 
the program hidden in the proof tt. 

Notice that BLL can be embedded into QBAL: for every BLL proof tt : T h A, there is a QBAL 
proof (tt) : r 1-0 a such that [tt] = [(tt)]. Moreover, the embedding is strongly compositional. 
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6 Embedding LFPL 



LFPL is a calculus for non-size-increasing computation introduced by the second author [9_. It 
allows to capture natural algorithms computing functions such that the size of the result is smaller 
or equal to the size of the arguments. This way, polynomial soundness is guaranteed despite the 
possibility of arbitrarily nested recursive definitions. 

We here show that a core subset of LFPL can be compositionally embedded into QBAL. LFPL 
types are generated by the following grammar: 

A::=o\'N \ A® A \ A-o A. 

Rules for LFPL in natural-deduction style are in Figure [31 We omit terms, since the computational 
content of type derivations is implicit in their skeleton. The set-theoretic semantics [ of an LFPL 



Axiom, Base Types and Weakening 



A\-A N,ohN hN^A T.BhA 

Multiplicative Rules 

T^; — A — 'i — n 



A^ B ^ T,Ah B 

ThA AhB T^A^B A,A,BhC 



Figure 3: LFPL 



formula A can be defined very easily: = JJceu C ^ C, [N] = Ylceui'-' ^ C) ^ (C ^ C), 
while the operators (g) and -<> are interpreted as usual. Notice that the interpretation of an LFPL 
formula does not depend on any environment p. This way, any LFPL proof tt : Ai, . . . ,An h B 
can be given a semantics [ tt ]] : |[ Ai (g) . . . ® An ]] — > [ -B ]] , itself independent on any p. 
LFPL types can be translated to QBAL formulas in the following way: 

3e : {1 < p}.\/a.a —o a 

3{x,y):{x + y<p}.{A)l®{B)l 
^ix):{x+p<q}.{A)l-^{B)l^^ 

Please observe that the interpretation of any LFPL is parametrized on two resource polynomials 
p and q. If a variable x occurs in p, but not in q, then x occurs only positively in {A)p this is an 
easy induction on the structure of A. 
The correspondence scales to proofs: 

Theorem 6.1 LFPL can be embedded into QBAL. In other words, for every LFPL proof tt : 
Ai, . . . , An \~ B, there exists a QBAL proof 

{it) : , . . . , {An)l^ h{^^ ..<y,l<y} {B)\^^ 

such that Jtt]] = | (tt) | . Moreover, the correspondence (•) is weakly compositional 
Proof. As expected, the proof goes by induction on tt. 



{A®B)l = 
{A^B)l = 
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• Successor: 

TT : (N)y ^ {x+y<b,l<b,l<x} (^)x+y ^ 
1' ^{x+y<b,l<b,l<x} (^)i+y ^ 

^{x+y<b,l<b} {^)''x+y 

• Application: 



• Abstraction: 



Let: 



Pairs: 



(r>^, (A>| h{2. ..<M<i.} <s)|:. 

: (r)l-, (A)^ \-{j:.xi<b,j:.xi+y<b,i<b} {B)'^.xi+y 
(^)^^{i:,x,<b^j:^x,+y<bs<b} -° 

z '^{^-Xi+w<bS<b,y+z<w} 

(C) 



Iteration: 



(r)^, (A)| h{^^ ,,<b,^^ ,.<b,i<b} (^)|,^ ^ y^ 
(r)|, (A)| h^53_ ,^<,,i<,} (A ® ^^^^^ 

(o)^ ^{,<M<b} (A ^ 

l"{y<ha<fc} ^ A)l 
^{y<b,l<b} (^)y ^{y<b,l<b} (^)o 

This concludes the proof. □ 

One may ask whether such an embedding might work for BLLproper. We believe this to be unlikely 
for several reasons. In particular, it seems that BLL lacks a mechanism which allows to turn the 
information about the size of the manipulated objects from being global to being local. In QBAL, 
this role is played by first order quantifiers. The way first order quantification is used in the 
definitions of {A (g) B)'^ and {A -<> _B)^ is illuminating, in this respect. 

7 Embedding RRW 

Ramified recurrence on words (RRW) is a function algebra extensionally corresponding to polyno- 
mial time functions introduced by Leivant in the early nineties [13j . Bellantoni and Cook's algebra 
BC can be easily embedded into RRW. 

Given a work algebra W, id is the identity function on W. Given a n-ary function g on W 
and n rn-ary functions /i , . . . , /,„ on W, we can define the m-ary composition of g and /i , . . . , , 
denoted comp(g, /i, . . . , /„), as follows: 

comp(g, /i,. . . ,/„)(ti, . . . = g{fi{ti, . . .,tjn), ■ ■ •,/«(<!, • • ■ ,tm))- 
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Given an n-ary function f^,^, on W and n + 2-ary functions f^i^, . . . , fc^ on W, we can define an 
n + 1-ary function g, denoted rec(f^i^, . . . , /c™, /e^), by primitive recursion as follows: 

g{ti, . . . ,tn,ew) = fe^mitl, ■ ■ ■ ,tn) 

. . . , t„, C^(t)) = f^^{ti, . . . ,tn,g{ti, . . . ,tn,t),t) 

Given an rt-ary function /e.^, on W and n + 1-ary functions /^i^, . . . , fc^ on W, we can define an 
n + 1-ary function g, denoted cond(/j,i , . . . , /c^, /e^), as a conditional as follows: 

. . . , i„, £w) = fe^jfitl, ■ ■ ■ :'tn) 
g{ti, . . . ,tn,c\i/{t)) = f^^{ti, . . . ,tn,t) 

Not every function obtained this way is in RRW: indeed, they correspond to primitive recursive 
functions on W. In FigurelH a formal system for judgements in the form h / : W*^ x . . . x W" W 
(where ?i, . . . , i„, i are natural numbers) is defined. If such a judgement can be derived from the 
rules in Figure [4j then / is said to be an RRW function (the definition of RRW given here is 
slightly different but essentially equivalent to the original one [13'). Leivant [131 proved that RRW 
functions are exactly the polytime computable functions on W. But RRW can be compositionally 
embedded into QBAL, at least in a weak sense: 





Ji = 


i 




h id : W* ^ W h ew : h cw : W ^ W h tt™ : W^' 


X . . . 


X W> 




h g : W^i X ... X W*" W* h /fc : X . . . X W^'" 








h comp(.9, /!,...,/„): W^^ x . . . W-'- ^ W 
1- /cw : X . . . X W*" X X W^' ^ W* h : W^i x . . . x ^ 






i < j 


h rec(/,j^, ...,/,»,/,„): X ... X x W^' ^ 
^ /c„ : X . . . X W'" x W^' ^ W' h /e : W'l X . . . X 








h cond(/,,i,, . . . , /c^, A„) : X . . . X W^" x W^' - 









Figure 4: RRW as a formal system. 



Theorem 7.1 RRIV can be embedded into QBAL. Suppose, in other words, that 

TT :h / : X . . . X ^ 

and that i < ij-^, . . . , ij^ , while i — iki, ■ ■ ■ , ik^ ■ Then, there exists an QBAL proof 

(tt) : Wa;j , . . . , Wj;^ ^{xk-^<x,...,Xk^<x} ^q(xj-^,...,Xj^)+x- 

where (JlILi V'w) ° Itt]] o ifiw — f ■ Moreover, (•) is weakly compositional. 
Proof. By induction on the proof of 

h / : W'l X . . . X W*" ^ W\ 

• Consider the identity function id. Clearly: 

x-i ^ {xi<x} X 
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• Suppose / = comp(5, /i, . . . , /„) and 

h 3 : W*i X ... X W*" ^ W* h /fe : W^i X . . . X W-^'™ ^ W**" 
h comp(ff, /i, ...,/„): W^i X .. . W^'" ^ 

We partition the sequence ii, . . . ,i„ into three sequences containing elements which are equal 
to i, strictly smaller than i and strictly greater than i, respectively: 

J • ■ • 7 *fc,, 
^U-i ; ■ ■ ■ ; ^lii; 
^ai 5 ■ ■ ■ 7 

Clearly, n = /i + w + 6. Similarly for the sequence ji, . ■ . ,jm- 

jti,- ■ ■ ,jt^ 

J Zi ; ■ ■ ■ ; J 

Jci J ■ ■ ■ 1 Jci 

Clearly, m = e + d + I. By induction hypothesis, there are proofs Wg, tt/j^, tt/,^ with the 
appropriate conclusions. Now, consider the proofs tt/^^ , ■ • • , tt/^.^ : they are the ones such that 
i = ifcj , . . . , ifc^ . By Proposition 12.21 we can assume that their conclusion is exactly the same, 
i.e., the polynomials rfc^ , . . . , in the rhs are indeed the same polynomial r. In other words, 
we have proofs 

Pfki '■ ■ ■ ■ ^xtj^<x,...,xt^<x '^qf.^(xi,...,Xm,x) 

Pfk,^ ■ '^xn ■ ■ ■ ,^^x„^ ^xn<x,...,xt^<x '^qf,i^(xi,...,Xm,x) 



where qkoixi, . . . , Xm, x) — r{xz-i i ■ • ■ ; ^zd) + x for every o. Consider the proofs tt/^ , . . . , tt/^^ : 
they are the ones such that i < z„j , . . . , i^^ . Observe that xt-^ , • ■ • , Xt,. do not appear anywhere 
in their conclusions. By Proposition 12.31 and Proposition [5?T1 we can obtain proofs: 

Pf^il ■ ^^Xn---T^^Xm ^Xtj^<X,...,Xt^<X '^^q^^(xi,...,X,n,x) 
Pfu^ • Xn ■ ■ ■ Xm ^'^ti<X,...,Xt^<x'^'^ q^^{^Xi,...,Xm,x) 

where , ■ • • , qu^ only depend on Xz-^ , • ■ • , ■ Similarly, we can obtain proofs 

Pfai ' ^^2;i ; ■ ■ ■ ) ^^X^ ^Xt-^<X^...,Xt^<X^^^ qa-^{x\,...,XTn^x) 
Pfa^ • ^^^Xi^ • ' • 7^^Xm ^Xt^<X,...,Xt^<X '^^qa^{xi,...,Xm,x) 



corresponding to tt^^^ , . . . , tt/^^ . Consider the proof tt^. By Proposition 12. 3[ we can obtain a 
proof 

Pg • qi {xi^...,Xm,x): • • • 7 Qn (xi,...^XrmX) ^ Xt ^"^X ^ . . . ,Xt ^<X p[x ^-^ j...,^^^ )+X 

Plugging the obtained proofs and remembering that base types are duplicable, we can construct 
a proof corresponding to / = comp(g, /i, . . . , /„): 

Pg Pfi ■■■ PU 

''^^Xi 1 ' ■ ' I X^n <X,...,Xt^ <X '^^p{X:^^ , . . . ,X z ^) -\-X 
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Suppose / = rec(^i^, . . . , /c^, and 

h Lk : W'l X . . . X W" X W' X W^' ^ h /. : W'^ x . . . x W" ^ W i< j 
h rec(/,;, . . . , : X . . . X W*" X W^' ^ 

By induction hypothesis, there are proofs tt^ and vr^, . . . , tt^ with the appropriate conclusions. 
By Proposition 12.21 we can assume that: 

TTl : Wa:i, . . . , W:r„+2 l~'^U{2;„ + i<x} Wq(^^^_...^^^.^_^^^_j^2)+^ 



where = {xfcj < x, . . . , < a;} and g is a fixed resource polynomial. Applying the 
substitution 

X (y + l)q + X 

Xn+i 1-^ {y + l)q + X 

Xn+2 ^ V 



to TTi, . . . , TTu, and by using Proposition 12 . 21 and Proposition [2711 ^6 obtain 

Pw ■ 'Wxi, ■ ■ ■ ,^x„,^(y+l)q{xj^,...,Xj^,y),^v ^ {y+2)q{xj^ ,. . . ,Xj^ ,y+l)+x 



For simplicity, wee use the following abbreviations: 

A = W^^ (g) ...(E) Wa;„ 

A - W,,,...,W,„ 

Now, from tt^ and from a proof corresponding to em (with conclusion h<^ Wq), we construct 
(Te as follows: 



A, A A ® W,(^^^ ■■■■.="3,„ '^0 
A h.^ A «i W,(^^.^ ,0) + x ® Wo 

H,^ S[y ^ 0] 

Similarly, from and from a proof corresponding to (with conclusion Wy h<^ Wy), we 
construct cr, as follows: 



A, W 



B, A, A h-g A ® W(^+2),(,^^ ,„ + i)+x ® W„+i 



B,A A0W(„+2)<,(xj-^,...,xj-^^,«+i)+x ® W„+i 
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And now we are ready to iterate over the step functions: 

(Je CTl ... (T„ 



W^„^^ h<^ B[y ^ Xn+i] 



A,^x„ + i ^{x^+i + l)qixj^,...,xj^,x„ + i)+x 

Suppose / = cond(/c,i,, . . . J^^J.^) and 

I- /c„ : X . . . X X ^ h /e : W'l X . . . X W'" ^ 
h cond(/,^, . . . , fc^JeJ : X . . . X x W^' ^ W'^ 

We can distinguish three subcases: 
• li i < j, there are proofs tt^ and tt^, . . . ,7ri^ with the appropriate conclusions. By Propo- 
sition [2l2l we can assume that: 



TTl : ^xi, ■ ■ ■ ,^x„ + l^'^ ^q{xjj^,...,Xj^,x^+i)+x 

where "rf = {xki < x, . . . , x^.^ < x}. Applying the substitution Xn+i 2/ to tti , . . . , tTu, and 
by using Proposition 12 . 21 and Proposition l2.11 we obtain 

Pw ■ 'Wxi,---,^x„,'Wy^'^'Wq{x,^,...,xj^,y+l)+x 

For simplicity, wee use the following abbreviations: 
A = W:ri «)...«) W^^ 

A = W,,,...,W,„ 

Now, from tt^ and from a proof corresponding to £w (with conclusion Wq), we construct 
as follows: 



A, A hcj? A ® W,(^^^ ,...,xj^ ,1)+^ «> Wo 



A l-<^= A » W,(x^.^ ,-.-,Xj,„ ,1)+^ Wo 



Similarly, from pi and from a proof corresponding to (with conclusion Wy h<g" W^), 
we construct Ui as follows: 



_B, A l-<g A ® W,(^^^ ,y+i)+x Wy+i 

h<^ B -o B[y ^ y + 1] 
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And now we are ready to iterate over the step functions: 
(Te (Ti ... aw 



^x„+i l-'S' B[y ^ Xn+l] A, B[y ^ Xn+l] l"-^ ^q{x,^,...,Xj^,x„+i)+x 
A, Wj;„^i h.^ W^(2:jj,...,2:j„.,x„ + i)+a: 

• M i ^ j, there are proofs tt^ and tt^, . . . ,7r^ with the appropriate conclusions. By Propo- 
sition [211] we can assume that: 

TTe : ^xi, ■ ■ ■ ,^x„ ^q{x,^,...,x.i^,0}+x 



)+x 



T^w ■ ^xi, ■ ■ ■ ,Wxr,+i '^q{x,^,...,Xj^)+x 

where — {xki < x, . . . ,Xk^ < x} and !^ — U {xn+i < x}. Applying the substitution 
Xn+l > y to TTi, . . . , TT^ and by using Proposition 12.21 and Proposition [2TT1 we obtain 



+x 



+ X 



where (o = "to U {y < x} For simplicity, wee use the following abbreviations: 



A = W^^ ... W^: 



V/ 



A = W,,,...,W,„ 



Now, from tt^ and from a proof corresponding to £w (with conclusion Wq), we construct 
tr^ as follows: 



Ha B[y ^ 0] 

Similarly, from and from a proof corresponding to (with conclusion W^+i), 
we construct cr,- as follows: 



S, A, A h^r A ® W,(,^^ ,....Xj-^)+:. ® W„+i 



\-s B ^ B[y ^ y + 1] 

And now we are ready to iterate over the step functions: 

cr. -.hg B ^ B[y ^y+1] 
<y, Hs,!„<,„_^i(S ^ S[y ^ y + 1]) 



'^=",,+1 '"3' -^[y ^ ^"+11 

W^^^j ^ a;„+i] A, B[y ^ x„+i] hg, W,(^^.^ .....a;^^ 
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• li i > j, the proof is similar to the case i < j ■ 
Observe how, in all the three cases, the proof corresponding to / is structurally the same. 
This concludes the proof □ 



8 Conclusions 

We presented QBAL, a new ICC system embedding both known systems of impredicative recursion 
in the sense of [8]. QBAL allows to overcome the main weakness of BLL, namely that all resource 
variables are global. In the authors' view, this constitutes the first step towards unifying ICC 
systems into a single framework. The next step consists in defining an embedding of light linear 
logic into QBAL and the authors are currently investigating on that. 
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